VYPR
← All advisories
Unrated severityNVD Advisory· Published May 10, 2013· Updated Jun 16, 2026

CVE-2013-2707

CVE-2013-2707

Description

Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings.

Affected products

18
  • Netweblogic/Login With Ajax17 versions
    cpe:2.3:a:netweblogic:login_with_ajax:2.1:*:*:*:*:*:*:*+ 16 more
    • cpe:2.3:a:netweblogic:login_with_ajax:2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:2.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:2.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:2.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:2.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:2.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:2.21:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:3.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:3.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:3.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:3.0.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:3.0b:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:3.0b3:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:3.1:*:*:*:*:*:*:*
  • WordPress/Login With Ajaxllm-fuzzy
    Range: <3.1
    Package: https://wordpress.org/plugins/login-with-ajax

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.